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Amendments to the Specification 

On page 10, please amend the paragraph at lines 10-18 by replacing it with the 
following replacement paragraph: 

Techniques relevant to tamper-resistance are well known to those skilled in the art 
of security. These techniques include methods for resisting tampering (such as 
appropriate encapsulation of the trusted device), methods for detecting tampering 
(such as detection of out of specification voltages, X-rays, or loss of physical 
integrity in the trusted device casing), and methods of eliminating data when 
tampering is detected. Further discussion of appropriate t e chniqu e s can bo found at 
http://www.cl.cam.ac.ukA mgk25/tamp e r.html. It will be appreciated that, although 
tamper-proofing is a most desirable feature of the present invention, it does not 
enter into the normal operation of the invention and, as such, is beyond the scope of 
the present invention and will not be described in any detail herein. 

Please replace the Abstract with the following, in which the two paragraphs have 
been collapsed together and extraneous matter deleted: 

A computer system is adapted to restrict operations on data. The computer system 
comprises a computer platform having a secure operator for checking whether a 
user of the platform is licensed to perform a requested operation on the data and for 
enabling use of the data; a portable trusted module containing a user identity, 
wherein a trusted module is a component adapted to behave in an expected manner 
and resistant to unauthorized external modification; and and an access profile 
specifying license permissions of users with respect to the data. Advantageously 
the computer platform contains a platform trusted module, which engages in 
mutual authentication with the portable trusted module and which contains the 
secure operator. The secure operator is adapted to check the access profile to 
determine whether a requested operation is licensed for the user identity contained 
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in the portable trusted module. The secure operator prevents the requested 
operation if a license is required and not present. 



Figur e 20 



